Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/PL9ztVshsic2Jur4Arjt87HBq3k.roa
File: PL9ztVshsic2Jur4Arjt87HBq3k.roa (raw, json)
Hash identifier: 3PtQOq7lJgI2ZzxyDPXWOSoP67J08jsX2SY1U5GjgWM=
Subject key identifier: 3C:BF:73:B5:5B:21:B2:27:36:26:EA:F8:02:B8:ED:F3:B1:C1:AB:79
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 08DF7242
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/PL9ztVshsic2Jur4Arjt87HBq3k.roa
Signing time: Sat 01 Jan 2022 11:02:39 +0000
ROA not before: Sat 01 Jan 2022 11:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48737
IP address blocks: 185.56.239.0/24 maxlen: 24
185.56.236.0/24 maxlen: 24
185.56.237.0/24 maxlen: 24
185.56.238.0/24 maxlen: 24
185.59.73.0/24 maxlen: 24
185.59.74.0/24 maxlen: 24
185.59.75.0/24 maxlen: 24
185.59.72.0/24 maxlen: 24
81.22.97.0/24 maxlen: 24
81.22.98.0/24 maxlen: 24
81.22.96.0/24 maxlen: 24
81.22.104.0/24 maxlen: 24
81.22.105.0/24 maxlen: 24
81.22.101.0/24 maxlen: 24
81.22.102.0/24 maxlen: 24
81.22.103.0/24 maxlen: 24
81.22.99.0/24 maxlen: 24
81.22.100.0/24 maxlen: 24
81.22.111.0/24 maxlen: 24
81.22.108.0/24 maxlen: 24
81.22.109.0/24 maxlen: 24
81.22.110.0/24 maxlen: 24
81.22.106.0/24 maxlen: 24
81.22.107.0/24 maxlen: 24
95.128.58.0/24 maxlen: 24
95.128.56.0/24 maxlen: 24
95.128.57.0/24 maxlen: 24
95.128.62.0/24 maxlen: 24
95.128.63.0/24 maxlen: 24
95.128.59.0/24 maxlen: 24
95.128.60.0/24 maxlen: 24
95.128.61.0/24 maxlen: 24
46.20.144.0/24 maxlen: 24
46.20.145.0/24 maxlen: 24
46.20.150.0/24 maxlen: 24
46.20.151.0/24 maxlen: 24
46.20.152.0/24 maxlen: 24
46.20.147.0/24 maxlen: 24
46.20.148.0/24 maxlen: 24
46.20.149.0/24 maxlen: 24
46.20.146.0/24 maxlen: 24
46.20.157.0/24 maxlen: 24
46.20.158.0/24 maxlen: 24
46.20.159.0/24 maxlen: 24
46.20.154.0/24 maxlen: 24
46.20.155.0/24 maxlen: 24
46.20.156.0/24 maxlen: 24
46.20.153.0/24 maxlen: 24
37.58.16.0/24 maxlen: 24
37.58.17.0/24 maxlen: 24
37.58.23.0/24 maxlen: 24
37.58.19.0/24 maxlen: 24
37.58.20.0/24 maxlen: 24
37.58.21.0/24 maxlen: 24
37.58.22.0/24 maxlen: 24
37.58.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148861506 (0x8df7242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Jan 1 11:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cbf73b55b21b2273626eaf802b8edf3b1c1ab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:3e:20:8d:d0:77:60:1d:13:b7:2a:03:76:
52:03:68:aa:0e:ee:6c:d6:6a:7b:9f:06:65:6d:84:
76:54:ee:0c:3a:3c:a1:eb:3d:21:bd:4d:ed:d3:a1:
47:c3:6d:64:f9:91:2d:42:4f:30:5f:41:27:e1:ed:
5e:2f:08:dc:42:83:76:ec:66:09:ea:3e:98:7c:6e:
f6:f2:e1:99:a4:a0:7f:ba:08:c8:4a:7b:73:fd:a8:
73:4c:2d:54:09:9e:34:18:2c:f7:23:3a:67:8d:d9:
92:89:47:ed:f6:54:0e:f5:b9:0b:fa:69:51:a1:d0:
a7:c9:c6:6f:fb:57:0e:08:84:0b:f9:76:f4:a4:32:
c4:af:07:e8:c1:d2:8e:3e:17:c7:75:09:cf:b2:fb:
d9:7f:bb:8d:03:91:60:cd:89:c1:2a:8e:fc:22:52:
9a:e7:95:68:53:fe:11:de:ec:07:dc:46:73:88:2f:
e2:ae:6b:84:17:fa:1a:eb:e7:56:d1:4f:e7:bc:ee:
60:43:e4:62:74:33:33:30:a0:c7:ad:13:0d:ba:a5:
9b:e1:25:f1:05:1c:f9:9e:69:92:9b:b5:58:47:26:
21:c7:b9:b6:7a:3d:2d:13:ec:2b:14:e4:ae:bc:f4:
a9:24:11:2b:52:3f:61:a3:cb:07:70:82:f2:43:3b:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:73:B5:5B:21:B2:27:36:26:EA:F8:02:B8:ED:F3:B1:C1:AB:79
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/PL9ztVshsic2Jur4Arjt87HBq3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.16.0/21
46.20.144.0/20
81.22.96.0/20
95.128.56.0/21
185.56.236.0/22
185.59.72.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:27:97:fd:fe:1f:3e:cd:dc:c9:53:95:a3:a1:bb:29:43:92:
ca:bd:81:00:b0:00:a7:63:ab:8e:e5:59:0d:67:80:bc:10:45:
90:df:5e:27:05:b7:c6:41:13:30:9a:15:54:8a:64:ee:f3:de:
c2:27:ee:7b:a0:99:2b:2f:f4:c0:7f:6a:f0:86:30:e0:68:55:
44:24:0c:19:bf:28:8f:b3:03:0e:ad:ae:a5:20:ea:f4:c2:30:
55:43:ec:d7:87:fd:9e:1f:11:10:a4:45:60:d2:b5:f5:4c:2a:
2e:f0:38:e2:74:cf:d1:1d:19:2a:51:83:1f:ae:fa:81:5d:18:
bc:03:ae:fc:de:7b:60:6a:12:4e:e7:37:24:4b:23:66:9a:24:
26:6b:b3:1c:3c:dd:5c:db:1c:9a:1b:a8:44:49:d6:62:1a:14:
58:da:b3:c6:7d:72:e4:e0:5d:47:4b:8c:83:6c:db:e9:95:82:
5e:6e:d1:af:41:ce:9a:d1:88:27:e4:5b:e1:6a:05:c7:88:5d:
62:7c:c9:64:0e:4a:3f:2a:97:84:e3:2a:af:e3:e4:01:70:19:
eb:01:19:d5:18:1d:17:f1:12:81:56:b3:90:c3:d6:89:32:4d:
a0:5f:26:7a:a7:06:b7:44:7d:f4:24:cd:59:16:d1:fa:26:2a:
89:43:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:12:24 2025 by rpki-client